DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
1aa2715ae61b67d14efb9d3c901e6525_JaffaCakes118.dll
Resource
win7-20240419-en
Target
1aa2715ae61b67d14efb9d3c901e6525_JaffaCakes118
Size
635KB
MD5
1aa2715ae61b67d14efb9d3c901e6525
SHA1
8d970fa3f994147be0903cff7c6540e2aea0fc00
SHA256
00fc384cc2eda83e87065d23d8f8f0e24eb087f7a5761003f27b06cd05efc978
SHA512
4e3fff5c32917c56379f755d7ac2776c90bd4586f9ff7b36f0f0454fff94ad9f5564b494b2f40ecbe1a829e8dd80703733ef87f51160e1189df524eb4b278aa0
SSDEEP
12288:YM0t9FNcxDMmfrLAF8rZIRf2MmsXay0nmOjehL/fO79s:ItjNcXnVInvaTmThT
Checks for missing Authenticode signature.
Processes:
resource |
---|
1aa2715ae61b67d14efb9d3c901e6525_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ